in reply to zapping gremlins

Use a module or even CGI's escapeHTML() function perhaps.